![]() Updating libvirt to the next major release series. With this, brings some changes to the build: - add python3-docutils-native to DEPENDS, since it is needed for doc building - remove a reference to libgnu.la from the Makefiles, since it is not needed or provided in the build dependencies - remove obselete packageconfig options: xenapi and phyp - add an explicit do_compile rule (versus the autotools bbclass variant), so we can create some directories before compilation starts - add ${B}/src to the PKG_CONFIG_PATH to the libvirt.pc file can be found during build, as it is queried by libvirt-python - with the ability to find the libvirt.pc file, we can also drop the manipulations for libvirt_api_xml_path, as it is returned from pkg-config queries. - clear PKG_CONFIG_SYSROOT_DIR during libvirt-python builds, since the libvirt.pc file already provides cflags/includes that are contained to the build/src directory structure. And finally, existing patches are refreshed to remove fuzz. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
---|---|---|
.. | ||
libvirt | ||
libvirt_6.1.0.bb | ||
libvirt-python.inc | ||
README |
libvirt default connection mode between client(where for example virsh runs) and server(where libvirtd runs) is tls which requires keys and certificates for certificate authority, client and server to be properly generated and deployed. Otherwise, servers and clients cannot be connected.
recipes-extended/libvirt/libvirt/gnutls-help.py is provided to help generate required keys and certificates.
Usage: gnutls-help.py [-a|--ca-info] <ca.info> [-b|--server-info] <server.info> [-c|--client-info] <client.info> If ca.info or server.info or client.info is not provided, a corresponding sample file will be generated.
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !! "ip_address" field of server.info must be IP address of the server. !! !! For more details, please refer to: !! !! https://libvirt.org/remote.html#Remote_certificates !! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Please deploy cacert.pem to CA and server and client /etc/pki/CA/cacert.pem Please deploy serverkey.pem to server /etc/pki/libvirt/private/serverkey.pem Please deploy servercert.pem to server /etc/pki/libvirt/servercert.pem Please deploy clientkey.pem to client /etc/pki/libvirt/private/clientkey.pem Please deploy clientcert.pem to client /etc/pki/libvirt/clientcert.pem"
For more details please refer to libvirt official document, https://libvirt.org/remote.html#Remote_certificates